Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.mft
File:                     86A3055545CB4F4C420BE943F5C18559EBC1F39B.mft (raw, json)
Hash identifier:          Yo2tAD9oaScDwMr5RucsMsFMpg/4XIKniGJ6RDBsW9A=
Subject key identifier:   83:85:80:DE:12:0F:9C:16:B1:FA:90:F9:15:16:6D:44:EF:CF:A9:94
Authority key identifier: 86:A3:05:55:45:CB:4F:4C:42:0B:E9:43:F5:C1:85:59:EB:C1:F3:9B
Certificate issuer:       /CN=86A3055545CB4F4C420BE943F5C18559EBC1F39B
Certificate serial:       643FE0E5B53ED2F2A84DB65F5044E8ABBE6B692C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/86A3055545CB4F4C420BE943F5C18559EBC1F39B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.mft
Manifest number:          16
Signing time:             Thu 04 Jul 2024 00:26:35 +0000
Manifest this update:     Thu 04 Jul 2024 00:21:35 +0000
Manifest next update:     Fri 05 Jul 2024 02:17:35 +0000
Files and hashes:         1: 86A3055545CB4F4C420BE943F5C18559EBC1F39B.crl (hash: bFNk5ICBrSDOk+FevTfT5bQ8lxhZthYsX/UV0dUPK00=)
                          2: 326130373a323438363a6663303a3a2f34342d3438203d3e20323135313437.roa (hash: tMsNakIaNE1YSnO83Wdq/qu0k7JReRsPeGD6S/YEGho=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/86A3055545CB4F4C420BE943F5C18559EBC1F39B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jul 2024 14:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3f:e0:e5:b5:3e:d2:f2:a8:4d:b6:5f:50:44:e8:ab:be:6b:69:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A3055545CB4F4C420BE943F5C18559EBC1F39B
        Validity
            Not Before: Jul  4 00:21:35 2024 GMT
            Not After : Jul  5 02:17:35 2024 GMT
        Subject: CN=838580DE120F9C16B1FA90F915166D44EFCFA994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:41:61:1d:a0:bb:f0:8f:61:e6:ad:14:61:
                    68:f7:4e:7b:40:bf:4b:8f:6e:8a:d4:af:80:2d:1f:
                    f0:8b:78:91:30:2d:19:16:1e:76:74:d0:fd:f0:7d:
                    0d:0a:8b:e7:ee:9b:f5:3b:16:3d:ca:bb:62:c5:bd:
                    ff:9e:df:ff:1e:89:66:ad:c4:df:80:79:51:38:32:
                    44:74:61:61:85:85:cd:91:ce:2d:be:4c:90:3c:e5:
                    cf:5b:5a:51:6f:00:a6:ce:22:e8:bc:9f:7e:93:b6:
                    48:9b:bd:0f:94:0b:32:f1:26:35:0e:77:a9:9c:a4:
                    5c:7d:8e:c7:bc:70:08:1b:2c:65:7c:b8:7e:14:df:
                    e4:2f:89:e9:f0:2b:a0:f2:3c:63:bf:1f:b2:6f:ed:
                    21:fe:88:85:0e:32:81:c1:ac:d2:91:27:23:2f:cb:
                    7a:5e:29:c0:dc:58:96:56:4c:69:1e:ae:d1:3c:2b:
                    9f:b5:53:b7:f3:93:ec:63:0f:18:08:65:49:a9:9c:
                    8f:f8:2b:84:58:6f:01:41:09:71:ce:a8:35:10:ba:
                    4d:ec:1f:15:72:44:5c:3f:48:b4:4d:6f:cd:31:01:
                    8b:d9:41:88:17:5b:48:96:d1:5c:04:61:66:85:8a:
                    e1:84:7c:03:69:03:00:14:03:a3:84:b0:13:2d:8c:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:85:80:DE:12:0F:9C:16:B1:FA:90:F9:15:16:6D:44:EF:CF:A9:94
            X509v3 Authority Key Identifier:
                keyid:86:A3:05:55:45:CB:4F:4C:42:0B:E9:43:F5:C1:85:59:EB:C1:F3:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/86A3055545CB4F4C420BE943F5C18559EBC1F39B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:77:b8:b2:fe:50:33:74:2a:ae:19:af:d6:ab:5a:d2:38:3d:
         b7:82:5e:3e:0b:b7:84:cc:4a:7e:c0:03:64:28:b2:6b:29:29:
         8d:1c:cf:a2:27:7c:71:93:d6:e0:6d:47:0e:30:6b:01:9a:33:
         3a:5d:df:79:58:f1:92:97:fd:a6:1a:2e:2a:2f:7a:29:de:c7:
         63:48:83:39:ae:a7:ca:0f:4b:65:bd:8c:2c:92:52:7b:0a:cf:
         95:58:52:aa:51:0a:24:05:c8:98:e5:95:ff:62:97:54:21:88:
         2f:aa:c8:28:dc:bd:9e:d7:ea:bc:e3:c5:9d:52:36:93:8c:8c:
         2a:5b:62:0d:57:f6:1e:06:9d:33:ea:36:8e:11:cc:4e:95:b3:
         7e:49:38:15:70:21:5e:64:5a:89:5e:0e:cd:f1:70:df:48:ed:
         18:5e:be:e0:bf:80:73:95:d2:5d:0d:14:b5:ac:a1:94:f8:a2:
         12:54:7d:56:56:a1:36:5a:2c:92:02:f6:e0:b9:35:b6:2d:16:
         51:a7:eb:35:60:69:d4:71:64:57:44:d3:f9:99:c6:56:6e:66:
         24:84:ed:7a:b6:29:d1:71:50:41:81:36:5a:5e:1c:72:07:ba:
         dc:0a:21:53:38:65:64:42:a2:cd:b3:45:46:7b:41:99:ff:b8:
         f4:24:52:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 03:51:59 2024 by rpki-client on console.sobornost.net